
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/IkQ9jncoHpMdccJ-mDmSU1FSoDU.roa
File: IkQ9jncoHpMdccJ-mDmSU1FSoDU.roa (raw, json)
Hash identifier: kA7SRo6OOl1JXBbJWPdq/cD3tU1ASRCboqh3+WHlcs8=
Subject key identifier: 22:44:3D:8E:77:28:1E:93:1D:71:C2:7E:98:39:92:53:51:52:A0:35
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 08F9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IkQ9jncoHpMdccJ-mDmSU1FSoDU.roa
Signing time: Tue 31 Mar 2026 07:44:36 +0000
ROA not before: Tue 31 Mar 2026 07:44:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2516
IP address blocks: 61.117.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 07:44:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=22443D8E77281E931D71C27E983992535152A035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:73:85:8a:68:bf:b2:eb:b9:5e:99:45:db:
d6:3c:84:44:ce:ff:52:5c:0d:12:16:94:f0:d4:86:
12:51:df:a1:9a:32:01:c0:60:5c:6a:3b:59:fb:92:
bd:b1:6f:80:0b:81:df:18:f3:cc:e1:54:3e:56:a5:
56:19:5a:08:6c:35:f6:11:e9:40:7b:a7:ab:7b:1c:
b3:73:ac:59:21:8c:2c:13:92:ac:ef:34:40:ff:b7:
bb:df:e1:c3:09:2f:0f:41:3a:fa:0d:b6:14:78:66:
e5:c1:25:27:4d:d4:11:96:3a:4d:1b:ba:fb:05:6f:
50:f3:09:f7:a6:f8:32:e0:98:8f:0c:4a:d6:00:54:
43:27:52:b2:09:a1:6c:4b:07:b9:a4:53:89:6c:0a:
10:62:b4:50:00:0f:ed:6d:4e:ba:1a:87:f0:27:9d:
a9:5c:b4:da:50:c1:00:0e:0f:e9:67:19:7a:42:d3:
5d:8e:64:f0:0b:3e:d1:ce:48:fc:47:d0:fe:8d:9c:
98:2d:a9:7b:db:79:80:e3:60:72:72:a2:64:8e:2a:
70:87:05:76:cc:ee:a9:99:b8:37:bb:af:61:1e:ac:
a5:71:17:64:3b:d7:64:93:3a:ef:6a:b3:22:be:ab:
f9:e7:47:1f:42:2c:f6:46:3f:01:44:fb:75:04:4c:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:44:3D:8E:77:28:1E:93:1D:71:C2:7E:98:39:92:53:51:52:A0:35
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IkQ9jncoHpMdccJ-mDmSU1FSoDU.roa
sbgp-ipAddrBlock: critical
IPv4:
61.117.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5e:a0:59:bd:2a:93:0f:c4:de:51:a2:a7:47:cd:a8:2d:7b:a2:
bb:f8:b3:93:32:5b:26:35:ee:a2:6f:73:0f:5f:3e:ce:5c:82:
ff:6f:13:fa:f3:9e:28:71:cf:f9:90:9d:b2:93:5f:28:6b:66:
cc:84:7d:e2:a1:a6:8c:33:ea:6c:5c:2f:b1:b6:eb:b1:3a:88:
fe:2a:aa:a5:a7:ed:a7:e3:f8:2c:5e:a2:06:fc:d3:3c:c5:54:
55:88:04:5c:35:fb:71:ff:46:49:45:7b:59:48:da:1c:70:66:
4c:38:45:7b:94:04:8d:02:9e:9c:1e:9a:45:03:9c:73:97:dd:
7b:af:7b:84:02:74:1b:17:9e:18:1e:6d:ea:43:ba:b4:6f:c0:
97:6d:7e:76:d2:45:cf:d8:1a:d9:80:ac:8a:d2:4d:c0:8e:dc:
c5:c4:75:b2:38:77:18:66:a2:47:42:11:5b:1a:7a:36:e7:28:
95:d5:18:b2:8e:89:7d:76:ff:b5:c7:36:06:09:4a:4c:2e:58:
63:20:6d:d0:33:fa:56:ad:3e:e9:9d:13:8e:3d:50:67:35:60:
81:58:78:35:f4:cd:60:ca:50:9c:f0:2b:c2:fd:d5:7d:2e:c2:
24:ea:1a:fb:13:b8:d5:89:65:64:18:a9:cc:31:ed:43:e6:27:
15:f5:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:47 2026 by rpki-client